Questions about CS-MARS

[haithamnofal]

Hi There,

I have CS-MARS 20 and I'm running version 3.4.3 on it.

I have the following questions about the product and I'd appreciate any input; my questions are:

1- I have ISS Proventia in my environment and I'm wondering if it has the same syslog format as the ISS Real Secure product. The reason why I'm asking is because I'm not seeing the Proventia IPS product under the MARS supported product list and would like to check if anybody has tested whether CS-MARS recognize the Proventia messages or not.

2- Is their a way on MARS to check the Hard Disk space left on the product in order to plan archiving?

3- Does MARS stores the received traffic in normalized format or just keep them as raw data and if so how much is the size of the normalized traffic?

Thanks!

Haitham

[beth-martin]

As far as I know MARS stores the received traffic in normalized format

[haithamnofal]

Hi,

Do you have an idea on the MARS normalized log size? I'm thinking of how should I plan the archiving period of my box?

Any clue on this would be highly appreciated.

Thanks,

Haitham